---
typeId: req
recordId: benac-safe-004
fields:
  title: Fail-closed default
  statement: Benac shall fail closed when package validity, signature validity, key
    status, trust scope, capability scope, privacy authorization, encryption metadata,
    invocation contract status, operation mediation status, storage lease, compute
    lease, or blob availability is unknown or conflicted.
  rationale: Unknown or conflicted authority should produce a clear blocked state and
    diagnostic rather than accidental power. This keeps experimentation bounded and
    repairable.
  verification: Unknown or conflicted policy, invocation-contract, operation-mediation,
    lease, and blob-availability fixtures deny execution and remote resource use.
  testable: true
  status: draft
  area: BENAC-SAFE
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.19 Safety and high-risk capabilities
  order: 190
---
